Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Projectgus

#28768de 53,622
8.8CVSS total
Vulnerabilidades · 1
PT-2018-9384
8.8
2018-08-20
Dave Gamble · Cjson · CVE-2018-1000216
**Name of the Vulnerable Software and Affected Versions** cJSON versions 1.7.2 and earlier **Description** The issue is related to a Double Free vulnerability in the cJSON library, which can result in a possible crash or Remote Code Execution (RCE). This can be exploited if an attacker can force the victim to print JSON data, and the exploitability depends on how the cJSON library is used, potentially allowing local or network-based attacks. **Recommendations** For cJSON versions 1.7.2 and earlier, update to version 1.7.3 to resolve the issue.